v4.2.2 — Repository Hygiene, CI Fixes & Docs Refresh

v4.2.2 — Repository Hygiene, CI Fixes & Docs Refresh

Patch release on top of the immutable v4.2.1. No breaking public API change.

Fixed

• API ORM models now tracked — apps/api/src/dsa_api/models/* were silently excluded by an unanchored models/ rule in .gitignore; CI/fresh clones were missing them (API couldn't import on clean checkout). Rule root-anchored to /models/, files committed.
• CI deterministic — mypy_path pins all workspace packages to source; CI installs node deps for the vscode test + web build.
• Actions bumped to Node-24 majors (checkout@v5, setup-python@v6, codeql-action@v4, dependency-review@v5, gitleaks@v3) — deprecation warning cleared.

Changed

• Repository trimmed to core artifacts — removed spec/prompt docs, demo/, versioned audit docs, human-eval/, reproduction/external/, ~17 MB of regenerable JSONs. Tags v4.2.0/v4.2.1 untouched.
• README rewritten in high-star OSS style (FastAPI/Polars/DuckDB/LangChain conventions).
• User-facing docs refreshed (docs/getting-started.md rewritten; internal-era headers removed).

Gates (live)

pytest 257 · mypy 104 clean · ruff pass · mkdocs --strict pass · check_public_claims 0 issues · CI green (18 steps, no warnings) · internal benchmark v1 50/50 @1.00 · 8/8 case studies verified.

Honest flags

PyPI publish of 4.2.2 pending owner mechanism. Tags v4.2.0/v4.2.1 still contain the removed content (release-truth rule: no tag rewrite).